Instagram CEO Kevin Systrom confirmed last week that two-factor authentication is now available to all of the app’s users worldwide. The company first announced plans to roll out two-factor over a year ago in February 2016 — and it was late to adapt the important security measure even then.

To enable it, head into your settings menu and you should see the option right above the ‘posts you’ve liked’ section. When two-factor authentication is enabled, Instagram will send your mobile number a security code whenever your account is accessed from a new device. That code is required before the login can be successfully completed. Unfortunately, Instagram does not support the use of third-party authenticator apps like Authy or Google Authenticator.

You can also save backup codes in the event that you lose access to your phone. Instagram cleverly includes options to copy those codes or screenshot them for saving elsewhere directly from the app.